Lucene search
+L

26492 matches found

Kitploit
Kitploit
added 2026/08/31 6:54 p.m.96 views

morty

Morty Web content sanitizer proxy as a service Morty rewrites web pages to exclude malicious HTML tags and attributes. It also replaces external resource references to prevent third party information leaks. The main goal of morty is to provide a result proxy for searx, but it can be used as a...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/31 6:43 p.m.5 views

CVE-2025-2005

WordPress FEUP Arbitrary File Upload Exploit CVE-2025-2005 This repository provides a Proof of Concept PoC exploit for the WordPress Front End Users plugin versions up to 3.2.32, which is vulnerable to arbitrary file upload due to missing MIME/file-type validation in its registration form.This...

9.8CVSS8.7AI score0.21793EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/31 6:08 p.m.75 views

swap_digger

swapdigger swapdigger is a bash script used to automate Linux swap analysis for post-exploitation or forensics purpose. It automates swap extraction and searches for Linux user credentials, Web form credentials, Web form emails, HTTP basic authentication, WiFi SSID and keys, etc. Download and run...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 5:33 p.m.3 views

CVE-2020-9495

CVE-2020-9495 PoC CVE-2020-9495 is medium severity LDAP injection vulnerability in Apache Archiva versions before 2.2.5. It allows an attacker to retrieve any LDAP attribute values of users that exist on the LDAP server. From the official Apache Archiva advisory: By providing special values to th...

5.3CVSS6AI score0.08004EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/31 5:31 p.m.3 views

crawlergo

crawlergo A powerful browser crawler for web vulnerability scanners English Document | 中文文档 crawlergo is a browser crawler that uses chrome headless mode for URL collection. It hooks key positions of the whole web page with DOM rendering stage, automatically fills and submits forms, with...

5.8AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/08/31 4:37 p.m.5 views

CVE-2018-7600

TRAN CONG DANH - SVTT - Mentor: LUU VAN LAN - CVE-2018-7600 - Day Started: 26/06/2024. Table of contents: 1. CVE summary 2. Prerequisites 3. CVE Analyse 4. Mitigation CVE summary An attacker could call a Drupal Form API Ajax Request containing the calluserfunc auto do function Drupal before 7.58,...

9.8CVSS7AI score0.99991EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/08/31 4:03 p.m.7 views

Form-Tools-3.1.1-RCE

Form-Tools-3.1.1-RCE CVE-2024-22722 RCE via SSTI Automation with Python. Server Side Template Injection SSTI vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application. This script automates the creation of ...

7.2CVSS5.3AI score0.00885EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 3:58 p.m.2 views

CVE-2025-52122

CVE CraftCMS Freeform CraftCMS Freeform contains an SSTI vulnerability, resulting in arbitrary code injection for all users that have access to editing a form submission title. Vulnerable versions are v5.0.0 test % set form = freeform.form'pentest' % % if form % form.render % else % Form not foun...

9.8CVSS5.2AI score0.0061EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 3:40 p.m.7 views

CVE-2024-42009

XSS Exploit for Roundcube Webmail 1.6.7 CVE-2024-42009 Description This script exploits a stored XSS vulnerability CVE-2024-42009 in Roundcube Webmail version 1.6.7. It injects a malicious payload into the webmail system, which, when triggered, exfiltrates email content from the victim’s inbox...

9.3CVSS7.4AI score0.81537EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/31 3:32 p.m.5 views

CVE-2024-21378

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ 🛡️ CVE-2024-21378...

8.8CVSS7.5AI score0.10976EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 3:01 p.m.2 views

cve-2025-55182

CVE-2025-55182 alias React2Shell Configurar entorno de prueba root@kitploit: kiot :: /react2shell » docker compose build --no-cache kiot :: /react2shell » docker compose up PoC Payload 1. RCE con respuesta en el cuerpo root@kitploit: POST / HTTP/1.1 Host: localhost:3000 Next-Action: whatever...

10CVSS7AI score0.99802EPSS
SaveExploits387
Kitploit
Kitploit
added 2026/08/31 2:27 p.m.2 views

CVE-2025-7340

🚨 HT Contact Form Widget = 2.2.1 - Carga Arbitraria de Archivos no Autenticada CVE-2025-7340 CVE: CVE-2025-7340 CVSS: 9.8 Crítica 📝 Descripción El complemento HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. para WordPress es vulnerable a cargas arbitrarias de...

9.8CVSS6.1AI score0.01668EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 2:09 p.m.3 views

CVE-2025-6934

🛡️ CVE-2025-6934 - Unauthenticated Privilege Escalation in Opal Estate Pro 📝 Description The Opal Estate Pro – Property Management and Submission plugin for WordPress, used by the FullHouse - Real Estate Responsive WordPress Theme , is vulnerable to Privilege Escalation in all versions up to and...

9.8CVSS5.9AI score0.25049EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/08/31 1:51 p.m.2 views

CVE-2023-5965

PoC for Espo CRM 7.2.4 CVE-2023-5965 & CVE-2023-5965 CVE-2023-5965 Advisory An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the update form, which could lead to arbitrary PHP code execution. To upload the file go to...

7.2CVSS7.1AI score0.01049EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 1:23 p.m.3 views

HTTPLoot

HTTPLoot An automated tool which can simultaneously crawl, fill forms, trigger error/debug pages and "loot" secrets out of the client-facing code of sites. Usage To use the tool, you can grab any one of the pre-built binaries from the Releases section of the repository. If you want to build the...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/31 12:54 p.m.3 views

CVE-2025-27590

CVE-2025-27590 - PoC Exploit Command Injection via Multipart Form Upload 📌 Description This is a Proof-of-Concept PoC exploit for CVE-2025-27590 , a command injection vulnerability affecting web applications that process multipart file uploads without proper sanitization. The vulnerability allows...

9.8CVSS6.1AI score0.27573EPSS
SaveExploits1
NVD
NVD
added 2026/08/31 12:17 p.m.7 views

CVE-2026-76983

Improper neutralization of input during web page generation in Apache Wicket. The tag is provided by org.apache.wicket.markup.html.form.AutoLabelTextResolver, which is registered by default in every WebApplication. The resolver writes the label it finds into the markup as it is, and reads no...

5.1CVSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/31 12:01 p.m.3 views

cve-2025-55182

CVE-2025-55182 - React Server Components RCE Exploit Python CLI exploit for CVE-2025-55182, a critical RCE vulnerability in React Server Components via react-server-dom-webpack. Based on: ejpir/CVE-2025-55182-poc Build and run vulnerable container root@kitploit: docker build -t cve-2025-55182:lab...

10CVSS7AI score0.99802EPSS
SaveExploits387References1
Kitploit
Kitploit
added 2026/08/31 11:38 a.m.5 views

CVE-2026-32488

CVE-2026-32488 CVE-2026-32488 Nonce değerini değişkene al $NONCE = "c82a4f80ba" curl.exe -s -X POST "http://localhost/wp-admin/admin-ajax.php" -d "action=userregistrationuserformsubmit" -d "urfrontendformnonce=$NONCE" -d "formid=6" -d...

8.1CVSS5.2AI score0.00345EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 11:33 a.m.4 views

CVE-2023-1405

CVE-2023-1405 Formidable Forms = 6.1.2 - Inyección de Objetos PHP sin autenticar Descripción: El plugin Formidable Forms para WordPress es vulnerable a la Inyección de Objetos PHP en versiones hasta la 6.1.2 inclusive, a través de la deserialización de entrada no confiable proveniente de envíos d...

7.5CVSS7.3AI score0.00702EPSS
SaveExploits2
Rows per page
Query Builder